This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json) Hash identifier: gA+930dddmnGa7OPM96NY9w2/WmgxJKAk1s57G2tLUo= Subject key identifier: C5:65:DC:D9:19:60:53:85:62:4D:EB:42:84:4B:03:DF:49:82:37:55 Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1 Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1 Certificate serial: 019BDEED8A8209DEE1EB531098EDA7115209 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft Manifest number: 17E0 Signing time: Wed 21 Jan 2026 05:01:07 +0000 Manifest this update: Wed 21 Jan 2026 05:01:07 +0000 Manifest next update: Thu 22 Jan 2026 05:01:07 +0000 Files and hashes: 1: JqglYn9oExlpuQ-Y68kS4ik8jRI.roa (hash: lo9W0LCZNdcrhkqYexTlEJ9bxvUJuTPrwpGw86jlaFk=) 2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: 6Ql+vqNC+iSbvz1+ALXAL9Y10THzDAN2RS5Avl++hGw=) 3: vAlQFpaLpXoMpWo27m8dZRrzZKc.roa (hash: V3cMkhkIFwXZN0a+IEYOXNX5PaTP19/XRl5SDnAT0cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:ed:8a:82:09:de:e1:eb:53:10:98:ed:a7:11:52:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1 Validity Not Before: Jan 21 05:01:07 2026 GMT Not After : Jan 22 05:01:07 2026 GMT Subject: CN=c565dcd919605385624deb42844b03df49823755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e1:d6:f0:38:43:ed:d1:17:c3:14:2a:b6:6e: e5:5b:60:eb:7e:2b:20:0b:a7:f0:a4:00:03:b3:f3: b4:0e:d1:46:d9:47:b6:19:6c:b0:c4:71:8b:6d:96: e6:a6:d4:93:18:e7:88:27:78:21:de:6c:7d:80:09: 92:1e:c5:55:cd:70:40:f8:9b:75:9d:74:1e:02:3e: 8f:f6:5c:f8:fa:91:b8:c8:22:66:90:6c:62:97:9e: a6:7e:54:1a:0a:fd:d4:dd:0e:d1:17:fe:f4:08:54: 1e:21:21:8b:0b:c0:97:b7:b3:56:65:f4:f4:99:44: d1:4c:66:3e:24:34:17:25:af:0c:28:7f:21:2b:46: 2f:4c:ad:9b:5c:98:49:e5:f3:d1:35:b4:80:12:99: 0c:9c:ec:3e:a4:50:76:3f:43:3b:eb:50:73:bf:5b: 78:de:1b:f6:37:ca:32:4f:b5:1b:73:c0:64:bc:6b: 87:77:fe:dd:bf:c9:60:2a:00:1f:df:22:b3:2e:7d: 3b:03:f8:a9:96:49:fa:49:e0:25:60:6c:2e:90:a4: 79:8f:6e:be:31:d8:00:fe:12:7e:8e:6f:70:1f:53: d0:43:f8:0f:0d:f4:4b:f1:9b:f4:15:79:b7:ab:50: 2e:f3:0d:ed:f3:f5:8d:9d:33:11:5f:06:6c:b9:a4: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:65:DC:D9:19:60:53:85:62:4D:EB:42:84:4B:03:DF:49:82:37:55 X509v3 Authority Key Identifier: keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b8:6f:5b:11:b3:d8:10:c4:01:f9:db:7d:95:6b:b7:8c:e4: ba:cc:1c:08:17:a3:8c:19:0e:b6:b1:81:fb:fd:90:75:ea:69: 09:c0:16:7f:f0:6e:30:bc:f9:6c:57:7a:cd:da:70:71:1f:f8: 2e:6c:87:70:c3:e8:5a:c9:a7:75:e0:46:f7:8f:4d:df:86:8b: 69:e1:6e:b6:c4:8c:cb:da:c4:58:6f:62:6a:6f:94:19:ff:bc: 49:02:81:13:aa:a1:29:7f:a5:c2:22:55:1a:ee:6d:dd:b8:58: 52:0d:bd:c6:43:c2:29:ee:e7:da:fa:01:b9:0c:13:ee:c7:e1: b4:4e:8a:fa:a7:71:62:9b:ff:c4:52:65:7d:87:df:27:eb:90: 73:45:5b:dc:04:8f:f0:cf:f5:fe:f8:41:d6:62:78:61:aa:18: a1:b6:3d:73:7b:cc:e4:d5:b9:2b:b9:bf:7a:1d:13:12:6f:cd: 7c:14:b7:a4:86:b0:f7:a4:ce:79:e2:01:44:6f:ee:b8:59:08: 81:cf:d4:17:5c:bc:10:03:25:4a:4e:59:e7:d2:d3:47:9e:e7: d1:39:cc:4d:84:67:d5:23:f5:93:c8:d9:a7:d7:0a:36:57:3d: cc:b7:ac:d5:c9:cf:e3:f0:2c:95:3a:1e:fb:cc:41:54:c4:d7: 06:9d:03:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZve7YqCCd7h61MQmO2nEVIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGI1OTFiNWQ4ZjA3NmVhZjQ3MmUzZWE0NWQzYjVjOGUx MzUwYTEwHhcNMjYwMTIxMDUwMTA3WhcNMjYwMTIyMDUwMTA3WjAzMTEwLwYDVQQD EyhjNTY1ZGNkOTE5NjA1Mzg1NjI0ZGViNDI4NDRiMDNkZjQ5ODIzNzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+HW8DhD7dEXwxQqtm7lW2Drfisg C6fwpAADs/O0DtFG2Ue2GWywxHGLbZbmptSTGOeIJ3gh3mx9gAmSHsVVzXBA+Jt1 nXQeAj6P9lz4+pG4yCJmkGxil56mflQaCv3U3Q7RF/70CFQeISGLC8CXt7NWZfT0 mUTRTGY+JDQXJa8MKH8hK0YvTK2bXJhJ5fPRNbSAEpkMnOw+pFB2P0M761Bzv1t4 3hv2N8oyT7Ubc8BkvGuHd/7dv8lgKgAf3yKzLn07A/iplkn6SeAlYGwukKR5j26+ MdgA/hJ+jm9wH1PQQ/gPDfRL8Zv0FXm3q1Au8w3t8/WNnTMRXwZsuaTjcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVl3NkZYFOFYk3rQoRLA99JgjdVMB8GA1UdIwQY MBaAFIdLWRtdjwdur0cuPqRdO1yOE1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQt MGM2YTY3ODIwYTU4LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jYWQ1MjEtZGFiZS00OWE4LWJjZTQtMGM2YTY3ODIwYTU4 LzEvaDB0WkcxMlBCMjZ2Unk0LXBGMDdYSTRUVUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7hvWxGz 2BDEAfnbfZVrt4zkuswcCBejjBkOtrGB+/2QdeppCcAWf/BuMLz5bFd6zdpwcR/4 LmyHcMPoWsmndeBG949N34aLaeFutsSMy9rEWG9iam+UGf+8SQKBE6qhKX+lwiJV Gu5t3bhYUg29xkPCKe7n2voBuQwT7sfhtE6K+qdxYpv/xFJlfYffJ+uQc0Vb3ASP 8M/1/vhB1mJ4YaoYobY9c3vM5NW5K7m/eh0TEm/NfBS3pIaw96TOeeIBRG/uuFkI gc/UF1y8EAMlSk5Z59LTR57n0TnMTYRn1SP1k8jZp9cKNlc9zLes1cnP4/AslToe +8xBVMTXBp0DCQ== -----END CERTIFICATE-----Generated at Wed Jan 21 06:52:39 2026 by rpki-client